Mailscanner --lint Result / ClamD / Sophos
Posted: 19 Nov 2018 12:08
Aha, the site admin prefers weekly backups.....
So back to my problem i posted last week.
For some (other) reason i checked the output of "MailScanner --lint" and was suprised that no installed virusscanner gives a feedback:
Meanwhile i updated EFA to version 3.0.2.6 + CLAMAV 0.100.2-1.el6 according to henk's post here.
Output of clamav-wrapper:
Output of sophos-wrapper:
Both virus scanner are working as shown here:
Should i be worried about that ?
Best regards,
Frank
So back to my problem i posted last week.
For some (other) reason i checked the output of "MailScanner --lint" and was suprised that no installed virusscanner gives a feedback:
Code: Select all
Checking version numbers...
Version number in MailScanner.conf (5.0.7) is correct.
Your envelope_sender_header in spamassassin.conf is correct.
MailScanner setting GID to (89)
MailScanner setting UID to (89)
Checking for SpamAssassin errors (if you use it)...
Using SpamAssassin results cache
Connected to SpamAssassin cache database
SpamAssassin reported no errors.
Connected to Processing Attempts Database
Created Processing Attempts Database successfully
There are 18 messages in the Processing Attempts Database
Using locktype = posix
MailScanner.conf says "Virus Scanners = clamd sophos"
Found these virus scanners installed: clamavmodule, sophos, clamd
===========================================================================
Filename Checks: Blocked Filename Detected (1 eicar.com)
Other Checks: Found 1 problems
Virus and Content Scanning: Starting
===========================================================================
If any of your virus scanners (clamavmodule,sophos,clamd)
are not listed there, you should check that they are installed correctly
and that MailScanner is finding them correctly via its virus.scanners.conf.
Config: calling custom end function SQLBlacklist
MailWatch: Closing down MailWatch SQL Blacklist
Output of clamav-wrapper:
Code: Select all
[root@MW24MailGate wrapper]# ./clamav-wrapper /usr /tmp
/tmp/.tmp_ZWQ0MDdkMzkxMDY3OTczMmM2OGI1MWRkZDI3MTU5NTU_webmin_goto_root: OK
/tmp/.tmp_MmNhNmI1ZmRjMGU0ZGE2NDgxODUwNDM2MzEzNGJjNTE_webmin_goto_root: OK
/tmp/ms-update-sa.1116033710: OK
/tmp/ms-update-sa.1110043919: OK
/tmp/ms-update-sa.1118042250: OK
/tmp/.tmp_ODY4YjEzNDA4NzAxYmFmYWI1ZmI4OGY0Zjg5NTc0YmY_webmin_goto_root: OK
/tmp/.tmp_YjFhZjViZjJlNjZmOWE0ZjM1MzY0MDA5OGNlOGYyYjk_webmin_goto_root: OK
/tmp/MailScanner.conf: OK
/tmp/.tmp_NmZhMzViZmJlNGY1ZjhmZTZkNGJiZTY2OGIzY2U5Y2M_webmin_goto_root: OK
/tmp/.tmp_OGU4MDFkNTMzNDY5Y2Y0OTM2YmIyZGU4ZWYwNTI0NjQ_webmin_goto_root: OK
/tmp/ms-update-sa.1107035934: OK
/tmp/.tmp_ODdiOTE4NmYzNDhhODliZWJhOWJlZDJjNGUwZDEzNDk_webmin_goto_root: OK
/tmp/.tmp_NmJkYzYxNWRkNDI0MDhhNzBmNzVkNTFlMTAzOWMxMzg_webmin_goto_root: OK
/tmp/ClamAV.update.log: OK
/tmp/sa_imageCerberusPLG.log: OK
/tmp/.tmp_OTZiODgzODJkZDRhZTcxZTRiMjE5ZGYzYjIyYjQxN2U_webmin_goto_root: OK
/tmp/.tmp_NDMwNTg0ZmE3N2RjNjAyNDU3YTE4ZGU4MjRmNzZkMTI_webmin_goto_root: OK
/tmp/ms-update-sa.1114041732: OK
/tmp/ms-update-sa.1108035701: OK
/tmp/.tmp_YzViMWVkNzE3YjU0NWUxOWIxYjk2ZjllM2NiMjJmYzA_webmin_goto_root: OK
/tmp/ms-update-sa.1119035508: OK
/tmp/ms-update-sa.1105041903: OK
/tmp/ms-update-sa.1109034219: OK
/tmp/EFA-Version: OK
/tmp/ms-update-sa.1115033737: OK
/tmp/ms-update-sa.1111033407: OK
/tmp/ms-update-sa.1112040448: OK
/tmp/ms-update-sa.1117051745: OK
/tmp/ms-update-sa.1106035438: OK
/tmp/.tmp_NGZhMTIwZTZlM2M2MGE1MzVlYTFmOTM3MTYyYmIxOTU_webmin_goto_root: OK
/tmp/ms-update-sa.1113041924: OK
----------- SCAN SUMMARY -----------
Known viruses: 6871038
Engine version: 0.100.2
Scanned directories: 1
Scanned files: 31
Infected files: 0
Data scanned: 0.63 MB
Data read: 0.22 MB (ratio 2.89:1)
Time: 20.641 sec (0 m 20 s)
Code: Select all
[root@MW24MailGate wrapper]# ./sophos-wrapper /usr /tmp
SAVScan virus detection utility
Version 5.47.0 [Linux/AMD64]
Virus data version 5.57, November 2018
Includes detection for 27176376 viruses, Trojans and worms
Copyright (c) 1989-2018 Sophos Limited. All rights reserved.
System time 12:59:38, System date 19 November 2018
IDE directory is: /opt/sophos-av/lib/sav
Using IDE file fare-fyp.ide
.
.
.
Using IDE file blada-lb.ide
Quick Scanning
1 file scanned in 6 seconds.
No viruses were discovered.
End of Scan.
Should i be worried about that ?
Best regards,
Frank